Skip to main content

CreateNewIndicatorsOnly

This Script is part of the Common Scripts Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

Create indicators to the Threat Intel database only if they are not registered. When using the script with many indicators, or when the Threat Intel Management database is highly populated, this script may have low performance issue.

Script Data#


NameDescription
Script Typepython3
TagsUtility
Cortex XSOAR Version6.5.0

Inputs#


Argument NameDescription
indicator_valuesThe indicator values
typeThe indicator type of the indicators.
sourceThe indicator source.
verdictThe indicator reputation.
tagsThe tags to add to the new indicators.
verboseWhether to output additional messages as readable output.

Outputs#


PathDescriptionType
CreateNewIndicatorsOnly.IDThe indicator ID.string
CreateNewIndicatorsOnly.ValueThe indicator value.string
CreateNewIndicatorsOnly.TypeThe indicator type.string
CreateNewIndicatorsOnly.ScoreThe indicator score.number
CreateNewIndicatorsOnly.CreationStatusThe status of the indicator requested to add. Value is either new, existing, or unavailable.string

Notice#


When using the script with many indicators, or when the Threat Intel Management database is highly populated, this script may have low performance issue.